fix(e2e): set runAsUser on Vault Helm installer pod

Also tidy test/go.mod after removing direct library-go import and gofmt
deployment_tls_override_test.go for verify.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: Arun Maurya

pkg/controller/certmanager/deployment_tls_override_test.go

@@ -109,9 +109,9 @@ func TestUnsupportedConfigOverridesWinOverClusterTLSProfile(t *testing.T) {
 				},
 			},
 			wantTLSArgs: map[string]string{
-				"--tls-min-version":         "VersionTLS10",
-				"--tls-cipher-suites":       "CUSTOM_MAIN",
-				"--metrics-tls-min-version": "VersionTLS10",
+				"--tls-min-version":           "VersionTLS10",
+				"--tls-cipher-suites":         "CUSTOM_MAIN",
+				"--metrics-tls-min-version":   "VersionTLS10",
 				"--metrics-tls-cipher-suites": "CUSTOM_METRICS",
 			},
 		},
@@ -167,7 +167,7 @@ func TestUnsupportedConfigOverridesWinOverClusterTLSProfile(t *testing.T) {
 			wantTLSArgs: map[string]string{
 				"--tls-min-version":           "VersionTLS13",
 				"--metrics-tls-min-version":   "VersionTLS13",
-				"--tls-cipher-suites":           "CUSTOM_MAIN",
+				"--tls-cipher-suites":         "CUSTOM_MAIN",
 				"--metrics-tls-cipher-suites": "CUSTOM_METRICS",
 			},
 		},

test/e2e/utils_test.go

@@ -1968,6 +1968,7 @@ func setupVaultServer(ctx context.Context, cfg *rest.Config, loader library.Dyna
 
 	allowPrivilegeEscalation := false
 	runAsNonRoot := true
+	runAsUser := int64(1001)
 	privileged := false
 	installerPodName := "vault-installer"
 	helmPod := &corev1.Pod{
@@ -1993,6 +1994,7 @@ func setupVaultServer(ctx context.Context, cfg *rest.Config, loader library.Dyna
 					SecurityContext: &corev1.SecurityContext{
 						AllowPrivilegeEscalation: &allowPrivilegeEscalation,
 						RunAsNonRoot:             &runAsNonRoot,
+						RunAsUser:                &runAsUser,
 						Privileged:               &privileged,
 						Capabilities: &corev1.Capabilities{
 							Drop: []corev1.Capability{"ALL"},

test/go.mod

@@ -22,7 +22,6 @@ require (
 	github.com/openshift/api v0.0.0-20260423140559-e9fad7d4cba1
 	github.com/openshift/cert-manager-operator v0.0.0-00010101000000-000000000000
 	github.com/openshift/client-go v0.0.0-20260330134249-7e1499aaacd7
-	github.com/openshift/library-go v0.0.0-20260429151228-ecbc792a4313
 	github.com/stretchr/testify v1.11.1
 	github.com/tidwall/gjson v1.18.0
 	github.com/vmware-archive/yaml-patch v0.0.11
@@ -102,6 +101,7 @@ require (
 	github.com/nxadm/tail v1.4.11 // indirect
 	github.com/onsi/ginkgo v1.16.5 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
+	github.com/openshift/library-go v0.0.0-20260429151228-ecbc792a4313 // indirect
 	github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_golang v1.23.2 // indirect